ByteOS Network

CVE Vulnerability Details :

CVE-2025-45770

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-31 Jul, 2025 | 00:00

Updated At-17 Aug, 2025 | 04:00

▼CVE Numbering Authority (CNA)

jwt v5.4.3 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/lcobucci	N/A
https://github.com/lcobucci/jwt	N/A
https://gist.github.com/ZupeiNie/cd88c827eef11a1618f8baacccd240fb	N/A

Hyperlink: https://github.com/lcobucci

Resource: N/A

Hyperlink: https://github.com/lcobucci/jwt

Resource: N/A

Hyperlink: https://gist.github.com/ZupeiNie/cd88c827eef11a1618f8baacccd240fb

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-326	CWE-326 Inadequate Encryption Strength

Type: CWE

CWE ID: CWE-326

Description: CWE-326 Inadequate Encryption Strength

Metrics

Version	Base score	Base severity	Vector
3.1	7.0	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Version: 3.1

Base score: 7.0

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References